SmartMedia Module 0.85 Beta for XOOPS - categoryId Cross-Site Scripting

SmartMedia Module 0.85 Beta for XOOPS - categoryId Cross-Site Scripting source: https://www.securityfocus.com/bid/37156/info The SmartMedia module for XOOPS is prone to a cross-site scripting vulnerability because it fails to sufficiently sanitize user-supplied data. An attacker may leverage this...

WordPress WP-PHPList Plugin 2.10.2 - Cross-Site Scripting Vulnerability

WP-PHPList plugin is prone to a cross-site scripting vulnerability. Application fails to properly clean up user-supplied input. An attacker may execute arbitrary script code in the browser of an user in the context of the affected site. In this way the attacker can steal cookie-based authenticati...

WordPress Plugin WP-phpList 2.10.2 - 'unsubscribeemail' Cross-Site Scripting

source: https://www.securityfocus.com/bid/37096/info The WP-PHPList plugin for WordPress is prone to a cross-site scripting vulnerability because the application fails to properly sanitize user-supplied input. An attacker may leverage this issue to execute arbitrary script code in the browser of ...

Cacti Multiple HTML Injection Vulnerabilities

Cacti is prone to multiple HTML-injection vulnerabilities because it fails to properly sanitize user-supplied input before using it in dynamically generated content. Copyright C 2009 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C b...

WordPress Plugin Firestats 1.0.2 - Multiple Cross-Site Scripting Authentication Bypass Vulnerabilities (1)

WordPress Plugin Firestats 1.0.2 - Multiple Cross-Site Scripting Authentication Bypass Vulnerabilities 1 source: https://www.securityfocus.com/bid/37099/info The FireStats plugin for WordPress is prone to multiple cross-site scripting vulnerabilities and an authentication-bypass vulnerability. An...

WordPress Plugin Firestats 1.0.2 - Multiple Cross-Site Scripting Authentication Bypass Vulnerabilities (2)

WordPress Plugin Firestats 1.0.2 - Multiple Cross-Site Scripting Authentication Bypass Vulnerabilities 2 source: https://www.securityfocus.com/bid/37099/info The FireStats plugin for WordPress is prone to multiple cross-site scripting vulnerabilities and an authentication-bypass vulnerability. An...

PHD Help Desk 1.43 - solic_display.php?q_registros Cross-Site Scripting

PHD Help Desk 1.43 - solicdisplay.php?qregistros Cross-Site Scripting source: https://www.securityfocus.com/bid/37029/info PHD Help Desk is prone to multiple cross-site scripting vulnerabilities because the application fails to sufficiently sanitize user-supplied data. Attacker-supplied HTML or...

Joomla! Component ProofReader 1.0 RC9 - Cross-Site Scripting

Joomla! Component ProofReader 1.0 RC9 - Cross-Site Scripting source: https://www.securityfocus.com/bid/37145/info The Joomla! ProofReader component is prone to a cross-site scripting vulnerability because the application fails to properly sanitize user-supplied input. An attacker may leverage thi...

PHD Help Desk 1.43 - 'solic_display.php?q_registros' Cross-Site Scripting

source: https://www.securityfocus.com/bid/37029/info PHD Help Desk is prone to multiple cross-site scripting vulnerabilities because the application fails to sufficiently sanitize user-supplied data. Attacker-supplied HTML or JavaScript code could run in the context of the affected site,...

Joomla! Component ProofReader 1.0 RC9 - Cross-Site Scripting

source: https://www.securityfocus.com/bid/37145/info The Joomla! ProofReader component is prone to a cross-site scripting vulnerability because the application fails to properly sanitize user-supplied input. An attacker may leverage this issue to execute arbitrary script code in the browser of an...

Joomla! Component Webee Comments 1.1/1.2 - 'index2.php' articleId SQL Injection

source: https://www.securityfocus.com/bid/38204/info The Joomla! Webee component is prone to an SQL-injection vulnerability and HTML-injection vulnerabilities because it fails to sufficiently sanitize user-supplied input. An attacker may leverage the HTML-injection issues to execute arbitrary...

CUPS - kerberos Cross-Site Scripting

CUPS - kerberos Cross-Site Scripting Attackers can exploit this issue by enticing an unsuspecting victim into following a malicious URI. The following example URI is available: http://www.example.com/admin/?kerberos=onmouseover=alert source: https://www.securityfocus.com/bid/36958/info CUPS is...

Apache mod_perl - Apache::Status Apache2::Status Cross-Site Scripting

Apache modperl - Apache::Status Apache2::Status Cross-Site Scripting source: https://www.securityfocus.com/bid/34383/info The Apache 'modperl' module is prone to a cross-site scripting vulnerability because it fails to sufficiently sanitize user-supplied data. An attacker may leverage this issue ...

TFTgallery 0.13 - sample Cross-Site Scripting

TFTgallery 0.13 - sample Cross-Site Scripting source: https://www.securityfocus.com/bid/36898/info TFTgallery is prone to a cross-site scripting vulnerability because the application fails to sufficiently sanitize user-supplied input. An attacker may leverage this issue to execute arbitrary scrip...

Basic Analysis and Security Engine Multiple Input Validation Vulnerabilities

Basic Analysis and Security Engine BASE is prone to multiple input-validation vulnerabilities because it fails to adequately sanitize user-supplied input. These vulnerabilities include an SQL-injection issue, a cross-site scripting issue, and a local file-include issue. SPDX-FileCopyrightText: 20...

Piwigo 2.0 - comments.php Multiple Cross-Site Scripting Vulnerabilities

Piwigo 2.0 - comments.php Multiple Cross-Site Scripting Vulnerabilities source: https://www.securityfocus.com/bid/41897/info Piwigo is prone to multiple cross-site scripting vulnerabilities because it fails to sufficiently sanitize user-supplied input. An attacker may leverage these issues to...

OpenDocMan 1.2.5 - user.php Cross-Site Scripting

OpenDocMan 1.2.5 - user.php Cross-Site Scripting source: https://www.securityfocus.com/bid/36777/info OpenDocMan is prone to an SQL-injection vulnerability and multiple cross-site scripting vulnerabilities because it fails to sufficiently sanitize user-supplied data. Exploiting these issues could...

OpenDocMan 1.2.5 - admin.php?last_message Cross-Site Scripting

OpenDocMan 1.2.5 - admin.php?lastmessage Cross-Site Scripting source: https://www.securityfocus.com/bid/36777/info OpenDocMan is prone to an SQL-injection vulnerability and multiple cross-site scripting vulnerabilities because it fails to sufficiently sanitize user-supplied data. Exploiting these...

OpenDocMan 1.2.5 - 'profile.php' Cross-Site Scripting

source: https://www.securityfocus.com/bid/36777/info OpenDocMan is prone to an SQL-injection vulnerability and multiple cross-site scripting vulnerabilities because it fails to sufficiently sanitize user-supplied data. Exploiting these issues could allow an attacker to steal cookie-based...

bloofoxCMS 'search' Parameter Cross Site Scripting Vulnerability

bloofoxCMS is prone to a cross-site scripting vulnerability because the application fails to sufficiently sanitize user-supplied input passed through the SPDX-FileCopyrightText: 2009 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the...